feat!: migrate package to vite-plus and require Node 24

Align the repository with the shared put.io package workflow by switching from tsdx and yarn to vite-plus, pnpm, and GitHub Actions. This also refreshes the docs, updates the test setup, and standardizes packaging and release automation.

BREAKING CHANGE: development and verification now require Node 24.14.0 or newer within the 24.x line.

Author: altaywtf

.github/workflows/ci.yml

@@ -0,0 +1,81 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    if: github.event_name != 'push' || !contains(github.event.head_commit.message, '[skip ci]')
+    name: Verify package
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: read
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: ".node-version"
+          cache: true
+
+      - name: Install dependencies
+        run: vp install
+
+      - name: Verify repository
+        run: vp run verify
+
+  release:
+    if: github.event_name == 'push' && github.ref == 'refs/heads/master' && !contains(github.event.head_commit.message, '[skip ci]')
+    name: Release package
+    needs:
+      - verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version-file: ".node-version"
+          cache: true
+
+      - name: Install dependencies
+        run: vp install
+
+      - name: Release package
+        uses: cycjimmy/semantic-release-action@v4
+        with:
+          extra_plugins: |
+            @semantic-release/commit-analyzer
+            @semantic-release/release-notes-generator
+            @semantic-release/npm
+            @semantic-release/github
+            @semantic-release/git
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -1,6 +1,5 @@
+*.log
+.DS_Store
 node_modules
 dist
-*.log
 coverage
-.DS_Store
-example

.node-version

@@ -0,0 +1 @@
+24.14.0

CONTRIBUTING.md

@@ -0,0 +1,33 @@
+# Contributing
+
+Thanks for contributing to `@putdotio/pas-js`
+
+## Setup
+
+Install dependencies with Vite+:
+
+```bash
+vp install
+```
+
+## Validation
+
+Run the repo guardrail before opening or updating a pull request:
+
+```bash
+vp run verify
+```
+
+That command runs formatting, linting, package build, unit tests, and coverage using the same entrypoint CI relies on.
+
+## Development Notes
+
+- Prefer `vp` for day-to-day commands
+- Put end-user package usage in [README.md](./README.md)
+- Keep contributor workflow changes in this file and security reporting guidance in [SECURITY.md](./SECURITY.md)
+
+## Pull Requests
+
+- Keep changes focused
+- Add or update tests when behavior changes
+- Update docs when package usage, validation, or release behavior changes

README.md

@@ -1,39 +1,58 @@
 <div align="center">
   <p>
-    <img src="https://static.put.io/images/putio-boncuk.png" width="72">
+    <img src="https://static.put.io/images/putio-boncuk.png" width="72" alt="put.io boncuk">
   </p>
 
   <h1>pas-js</h1>
 
+  <p>Browser analytics client for the put.io Analytics System.</p>
+
   <p>
-    JavaScript SDK for <a href="https://github.com/putdotio/pas">put.io Analytics System.</a>
+    <a href="https://github.com/putdotio/pas-js/actions/workflows/ci.yml?query=branch%3Amaster" style="text-decoration:none;"><img src="https://img.shields.io/github/actions/workflow/status/putdotio/pas-js/ci.yml?branch=master&style=flat&label=ci&colorA=000000&colorB=000000" alt="CI"></a>
+    <a href="https://www.npmjs.com/package/@putdotio/pas-js" style="text-decoration:none;"><img src="https://img.shields.io/npm/v/%40putdotio%2Fpas-js?style=flat&colorA=000000&colorB=000000" alt="npm version"></a>
+    <a href="https://github.com/putdotio/pas-js/blob/master/LICENSE" style="text-decoration:none;"><img src="https://img.shields.io/github/license/putdotio/pas-js?style=flat&colorA=000000&colorB=000000" alt="license"></a>
   </p>
-
-<p><a href="https://travis-ci.org/putdotio/pas-js"><img src="https://travis-ci.org/putdotio/pas-js.svg?branch=master" alt="Build Status"></a>
-<a href="https://coveralls.io/github/putdotio/pas-js?branch=master"><img src="https://coveralls.io/repos/github/putdotio/pas-js/badge.svg?branch=master" alt="Coverage Status"></a>
-<img src="https://img.shields.io/npm/v/@putdotio/pas-js" alt="npm (scoped)">
-<img src="https://img.shields.io/bundlephobia/minzip/@putdotio/pas-js" alt="npm bundle size (scoped)">
-<img src="https://img.shields.io/github/license/putdotio/pas-js" alt="GitHub"></p>
 </div>
 
 ## Installation
 
-```bash
-yarn add @putdotio/pas-js
+Install with npm:
 
+```bash
 npm install @putdotio/pas-js
 ```
 
-### Module
+## Quick Start
 
-```js
-import Pas from '@putdotio/pas-js'
+```ts
+import createPasClient from "@putdotio/pas-js";
+
+const pas = createPasClient();
+
+pas.identify({
+  id: "42",
+  hash: "signed-user-hash",
+  properties: {
+    plan: "pro",
+  },
+});
+
+pas.track("transfer_completed", {
+  transfer_id: 123,
+});
 ```
 
-### CommonJS
+## Browser Tracking
+
+The default client keeps an anonymous identifier in browser cookies and can send identity, event, and page-view payloads to PAS:
 
-```js
-const Pas = require('@putdotio/pas-js').default
+```ts
+import createPasClient from "@putdotio/pas-js";
+
+const pas = createPasClient();
+
+pas.alias({ id: "42", hash: "signed-user-hash" });
+pas.pageView();
 ```
 
 ## API
@@ -44,3 +63,16 @@ const Pas = require('@putdotio/pas-js').default
 | **identify** | `({ id: string/number, hash: string, properties?: object })` |
 | **track**    | `(name: string, properties?: object)`                        |
 | **pageView** | -                                                            |
+
+## Docs
+
+- [CONTRIBUTING.md](./CONTRIBUTING.md)
+- [SECURITY.md](./SECURITY.md)
+
+## Contributing
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md)
+
+## License
+
+[MIT](./LICENSE)

SECURITY.md

@@ -0,0 +1,22 @@
+# Security
+
+If you believe you have found a security or privacy issue in this project, please report it privately.
+
+## Contact
+
+- email: ui@put.io
+
+Please do not open a public issue for vulnerabilities or sensitive reports.
+
+## Scope
+
+Useful reports usually include issues involving:
+
+- analytics event or identity spoofing
+- token, credential, or secret exposure
+- private or user data exposure
+- unsafe request handling in the browser client
+
+## Disclosure
+
+Please allow reasonable time to investigate and fix the issue before sharing details publicly.

package.json

@@ -1,43 +1,52 @@
 {
   "name": "@putdotio/pas-js",
   "version": "2.9.0",
-  "description": "Client-side JS client for Putio Analytics System",
+  "description": "Browser analytics client for the put.io Analytics System.",
   "keywords": [
-    "putio",
+    "analytics",
+    "pas",
     "put.io",
-    "Putio Analytics System"
+    "putio"
   ],
-  "main": "dist/index.js",
-  "module": "dist/pas-js.esm.js",
-  "typings": "dist/index.d.ts",
-  "files": [
-    "dist",
-    "src"
-  ],
-  "scripts": {
-    "start": "tsdx watch",
-    "build": "tsdx build",
-    "test": "tsdx test",
-    "lint": "tsdx lint",
-    "prepare": "tsdx build",
-    "coveralls": "tsdx test --coverage && cat ./coverage/lcov.info | coveralls"
-  },
-  "husky": {
-    "hooks": {
-      "pre-commit": "tsdx lint"
-    }
+  "homepage": "https://github.com/putdotio/pas-js",
+  "bugs": {
+    "url": "https://github.com/putdotio/pas-js/issues"
   },
-  "author": "Put.io <devs@put.io>",
   "license": "MIT",
-  "homepage": "https://github.com/putdotio/pas-js",
+  "author": "put.io <ui@put.io>",
   "repository": {
     "type": "git",
     "url": "https://github.com/putdotio/pas-js.git"
   },
-  "bugs": {
-    "url": "https://github.com/putdotio/pas-js/issues"
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "vp pack",
+    "check": "vp check .",
+    "clean": "rm -rf coverage dist",
+    "coverage": "vp test --coverage",
+    "dev": "vp pack --watch",
+    "prepack": "vp pack",
+    "test": "vp test",
+    "verify": "vp check . && vp pack && vp test && vp test --coverage"
   },
-  "prettier": "@putdotio/prettier-config",
   "dependencies": {
     "js-cookie": "^2.2.1",
     "query-string": "^5.1.1",
@@ -47,17 +56,25 @@
   "devDependencies": {
     "@putdotio/prettier-config": "^1.0.0",
     "@types/js-cookie": "^2.2.4",
+    "@types/node": "^24.0.0",
     "@types/query-string": "^5",
     "@types/uuid": "^8.3.0",
-    "coveralls": "^3.1.0",
-    "husky": "^4.2.5",
-    "jest-mock-extended": "^1.0.10",
-    "tsdx": "^0.13.2",
-    "tslib": "^2.0.1",
-    "typescript": "^4.0.2",
+    "@vitest/coverage-v8": "4.1.0",
+    "jsdom": "^26.1.0",
+    "typescript": "^5.9.3",
+    "vite-plus": "^0.1.12",
+    "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.12",
     "xhr-mock": "^2.5.1"
   },
-  "publishConfig": {
-    "access": "public"
+  "prettier": "@putdotio/prettier-config",
+  "engines": {
+    "node": ">=24.14.0 <25"
+  },
+  "packageManager": "pnpm@10.32.1",
+  "pnpm": {
+    "overrides": {
+      "vite": "npm:@voidzero-dev/vite-plus-core@0.1.12",
+      "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.12"
+    }
   }
 }